From bb562a91cafdf3cc8ce658e06330fe3e5dc38333 Mon Sep 17 00:00:00 2001 From: mblanke Date: Fri, 20 Feb 2026 07:16:17 -0500 Subject: [PATCH] version 0.3.1 --- backend/scan_cols.py | 8 ++++++++ backend/scan_rows.py | 23 +++++++++++++++++++++++ backend/threathunt.db-shm | Bin 0 -> 32768 bytes backend/threathunt.db-wal | 0 frontend/package-lock.json | 30 +----------------------------- 5 files changed, 32 insertions(+), 29 deletions(-) create mode 100644 backend/scan_cols.py create mode 100644 backend/scan_rows.py create mode 100644 backend/threathunt.db-shm create mode 100644 backend/threathunt.db-wal diff --git a/backend/scan_cols.py b/backend/scan_cols.py new file mode 100644 index 0000000..7f6248f --- /dev/null +++ b/backend/scan_cols.py @@ -0,0 +1,8 @@ +import json, urllib.request +url = "http://localhost:8000/api/datasets?skip=0&limit=20&hunt_id=fd8ba3fb45de4d65bea072f73d80544d" +data = json.loads(urllib.request.urlopen(url).read()) +for d in data["datasets"]: + ioc = list((d["ioc_columns"] or {}).items()) + norm = d.get("normalized_columns") or {} + hc = {k: v for k, v in norm.items() if v in ("hostname", "fqdn", "username", "src_ip", "dst_ip", "ip_address", "os")} + print(d["name"], "|", d["row_count"], "|", ioc, "|", hc) \ No newline at end of file diff --git a/backend/scan_rows.py b/backend/scan_rows.py new file mode 100644 index 0000000..6843762 --- /dev/null +++ b/backend/scan_rows.py @@ -0,0 +1,23 @@ +import json, urllib.request + +def get(path): + return json.loads(urllib.request.urlopen("http://localhost:8000" + path).read()) + +# Check ip_to_hostname_mapping +ds_list = get("/api/datasets?skip=0&limit=20&hunt_id=fd8ba3fb45de4d65bea072f73d80544d") +for d in ds_list["datasets"]: + if d["name"] == "ip_to_hostname_mapping": + rows = get(f"/api/datasets/{d['id']}/rows?offset=0&limit=5") + print("=== ip_to_hostname_mapping ===") + for r in rows["rows"]: + print(r) + if d["name"] == "Netstat": + rows = get(f"/api/datasets/{d['id']}/rows?offset=0&limit=3") + print("=== Netstat ===") + for r in rows["rows"]: + print(r) + if d["name"] == "netstat_enrich2": + rows = get(f"/api/datasets/{d['id']}/rows?offset=0&limit=3") + print("=== netstat_enrich2 ===") + for r in rows["rows"]: + print(r) \ No newline at end of file diff --git a/backend/threathunt.db-shm b/backend/threathunt.db-shm new file mode 100644 index 0000000000000000000000000000000000000000..fe9ac2845eca6fe6da8a63cd096d9cf9e24ece10 GIT binary patch literal 32768 zcmeIuAr62r3=0.10.0" } @@ -14762,7 +14740,6 @@ "resolved": "https://registry.npmjs.org/rollup/-/rollup-2.79.2.tgz", "integrity": "sha512-fS6iqSPZDs3dr/y7Od6y5nha8dW1YnbgtsyotCVvoFGKbERG++CVRFv1meyGDE1SNItQA8BrnCw7ScdAhRJ3XQ==", "license": "MIT", - "peer": true, "bin": { "rollup": "dist/bin/rollup" }, @@ -15008,7 +14985,6 @@ "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz", "integrity": "sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==", "license": "MIT", - "peer": true, "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", @@ -16391,7 +16367,6 @@ "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", "license": "MIT", - "peer": true, "engines": { "node": ">=12" }, @@ -16668,7 +16643,6 @@ "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz", "integrity": "sha512-1FXk9E2Hm+QzZQ7z+McJiHL4NW1F2EzMu9Nq9i3zAaGqibafqYwCVU6WyWAuyQRRzOlxou8xZSyXLEN8oKj24g==", "license": "Apache-2.0", - "peer": true, "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" @@ -16995,7 +16969,6 @@ "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.105.2.tgz", "integrity": "sha512-dRXm0a2qcHPUBEzVk8uph0xWSjV/xZxenQQbLwnwP7caQCYpqG1qddwlyEkIDkYn0K8tvmcrZ+bOrzoQ3HxCDw==", "license": "MIT", - "peer": true, "dependencies": { "@types/eslint-scope": "^3.7.7", "@types/estree": "^1.0.8", @@ -17480,7 +17453,6 @@ "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz", "integrity": "sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==", "license": "MIT", - "peer": true, "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1",